CVE-2026-23961

creationtimestamp| type| source ---|---|--- 2026-01-22 05:14:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcygihqvdh26...

CVE-2026-23961 Mastodon may allow a remote suspension bypass

Mastodon is a free, open-source social network server based on ActivityPub. Mastodon allows server administrators to suspend remote users to prevent interactions. However, some logic errors allow already-known posts from such suspended users to appear in timelines if boosted. Furthermore, under...